a835db0e8b9d890e8d8269f05a08241b_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

a835db0e8b9d890e8d8269f05a08241b_JaffaCakes118
Size

90KB
MD5

a835db0e8b9d890e8d8269f05a08241b
SHA1

4e5a4cf99e1434cd0bbb91ac448a3c52624212c5
SHA256

c2ada2f19caf979ce5ff1582d29726cc127f70a23cb4daa70e14e4fa93374935
SHA512

0b8fcbf8d8acdcda97141b2777d11dc85ea988f7e3a96c67c3d76e6433cb1a66cfda5dcc080643f8112671e96f9b6e652d2c2c3783495d91433a8a7dc346b93f
SSDEEP

1536:tBTG+HAzQoqgK2U3wDJp3vHivOCQTR3U6e0T993BvK3BMDP3TFVk8jRPR1WZyl99:tBCuUm1ngDJFvC5EbLYenFTjRp1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a835db0e8b9d890e8d8269f05a08241b_JaffaCakes118

Files

a835db0e8b9d890e8d8269f05a08241b_JaffaCakes118
.exe windows:4 windows x86 arch:x86

8b4cc2be0324264fac1338e1727600aa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CloseHandle
WriteFile
CreateFileA
DeleteFileA
lstrcpyA
lstrlenA
GetTempFileNameA
GetTempPathA
GlobalAlloc
ExitProcess
GetCommandLineA
GetModuleHandleA

shell32

ShellExecuteA

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 85KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ